Content-type: text/html
ipsec dnskey --prompt
ipsec dnskey --single
If stdin is a tty or if the --prompt option is given, then it issues a prompt to the user. Otherwise, it is silent, except for results.
The program will accept multiple queries concurrently, with each result being marked with the ID provided on the output. The IDs are strings.
If the --single option is given, then the program will not attempt to execute concurrent queries, but will serialize all input and output.
There are eleven command that the program understands. This is to lookup different types of records in both the forward and reverse maps.
KEY queryid FQDN
looks up the FQDN in the DNS, returning 1 or more KEY resource records.
KEY4 queryid IPv4-address
looks up in the reverse map ( in-addr.arpa. ) for a KEY record for the given IPv4 address.
KEY6 queryid IPv6-address
looks up in the reverse map (both
ip6.arpa
and
ip6.int
in that order) for the KEY record for the given IPv6 address.
TXT4 queryid IPv4-address
looks up in the reverse map ( in-addr.arpa. ) for a TXT record for the given IPv4 address.
TXT6 queryid IPv6-address
looks up in the reverse map (both
ip6.arpa
and
ip6.int
in that order) for the TXT record for the given IPv6 address.
IPSECKEY4 queryid IPv4-address
looks up in the reverse map ( in-addr.arpa. ) for an IPSECKEY record for the given IPv4 address.
IPSECKEY6 queryid IPv6-address
looks up in the reverse map (both
ip6.arpa
and
ip6.int
in that order) for the IPSECKEY record for the given IPv6 address.
OE4 queryid IPv4-address
looks up in the reverse map ( in-addr.arpa. ) for an appropriate resource record for the IPv4 address. This may involve looking for IPSECKEY, TXT or KEY resource records.
OE6 queryid IPv6-address
looks up in the reverse map (both
ip6.arpa
and
ip6.int
in that order) for an appropriate resource record for IPv6 addresses.
This may involve looking for IPSECKEY, TXT or KEY resource records.
VPN queryid FQDN
looks up in the forward map for FQDN for an appropriate resource record for VPN purposes. This is an alias for "KEY" in DNS usage. Other resolvers may treat this differently.
VPN4 queryid IPv4-address
looks up in the reverse map ( in-addr.arpa. ) for an appropriate resource record for the IPv4 for VPN purposes. This is an alias for "KEY4" in DNS usage. Other resolves may treat this differently.
OE6 queryid IPv6-address
looks up in the reverse map (both
ip6.arpa
and
ip6.int
in that order) for an appropriate resource record for IPv6 addresses.
This may involve looking for IPSECKEY, TXT or KEY resource records.
A queryid FQDN
This looks up a forward (A) resource record for FQDN.
AAAA queryid FQDN
This looks up a forward (AAAA) resource record for FQDN.
% ipsec dnskey --prompt --single dnskey> OE4 31459 1.2.3.4 31459 START 1033404745 31459 INFO QUERYING 3.4.5.6 31459 INFO QUERYING 3.4.8.9 31459 INFO GOT SOA 3.2.1.in-addr.arpa. revision 4 31459 INFO GOT CNAME 4.3.2.1.in-addr.arpa to 4.0/26.3.2.1.in-addr.arpa. 31459 KEY 16896 4 1 AwEAAZ7PeJW...yRAHbR 31459 DONE dnskey>